wuftpd port update for CERT CA-99.13?

Michael Bryan (fbsd-securityursine.com)
Tue, 26 Oct 1999 12:35:37 -0700

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
• Next message: Sam Samalin: "ftp with ipfw fwd"
• Previous message: Brian Fundakowski Feldman: "Re: Security tests"

I see that the wuftpd port (ports/ftp/wuftpd) was updated
on Sunday, October 24th. It now brings the port up to
version 2.6.0, which has important security fixes. Is an
official security announcement from the security team in
the pipeline?

Also, as reported earlier, the FreeBSD portion of the
original CERT announcement is incorrect, as two of the
three vulnerabilities were -not- addressed in the 8/30/99
updates to the port. They are only addressed by this
update to 2.6.0 of wuftpd. It would probably be a good
idea to get CERT to update their announcement:

http://www.cert.org/advisories/CA-99-13-wuftpd.html

Michael Bryan
fbsd-securityursine.com

To Unsubscribe: send mail to majordomoFreeBSD.org
with "unsubscribe freebsd-security" in the body of the message

• Next message: Sam Samalin: "ftp with ipfw fwd"
• Previous message: Brian Fundakowski Feldman: "Re: Security tests"

This archive was generated by hypermail 2.0b3 on Tue Oct 26 1999 - 14:35:43 CDT